Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/ZLnsYJrehSHy13eQaMRY1Tbep5I.roa
File: ZLnsYJrehSHy13eQaMRY1Tbep5I.roa (raw, json)
Hash identifier: beMY8QS7fWlkYI5VTaRGjskfF3hsi1HR7CrNo9yaWBM=
Subject key identifier: 64:B9:EC:60:9A:DE:85:21:F2:D7:77:90:68:C4:58:D5:36:DE:A7:92
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01941FFAB8155843092883F898DB17B95DAC
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/ZLnsYJrehSHy13eQaMRY1Tbep5I.roa
Signing time: Wed 01 Jan 2025 03:48:32 +0000
ROA not before: Wed 01 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12743
IP address blocks: 194.9.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 19:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b8:15:58:43:09:28:83:f8:98:db:17:b9:5d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64b9ec609ade8521f2d7779068c458d536dea792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:a8:94:64:ea:8e:58:f7:c1:f3:d9:3a:1f:
79:72:22:45:19:2e:cf:38:8f:f5:e7:f6:c2:75:47:
27:fb:51:ca:7b:79:0d:0b:98:b0:69:04:cd:45:f9:
12:43:81:54:72:d9:9b:c0:1a:83:2f:de:cb:e8:8f:
f6:bb:9a:6a:50:ee:31:91:1d:8d:be:65:3a:bf:0d:
92:97:de:12:ef:6d:87:c6:a1:f6:41:bc:05:e9:ec:
e5:7d:ef:ff:e8:44:83:e6:1e:c1:4c:78:a1:22:1a:
d0:68:b5:a6:55:ae:d6:c6:0e:98:2e:e2:0e:c7:05:
ec:5f:82:1c:c2:df:44:6f:df:d6:ff:ef:d3:61:af:
c5:82:ce:67:16:4e:cd:a1:6c:4f:cd:29:cf:94:49:
37:3e:18:15:ed:c6:06:29:06:82:14:2b:7d:cf:e9:
90:60:ce:92:0a:8a:d6:d6:c6:a0:f0:3f:74:25:b6:
30:c5:4c:8b:99:02:cd:3c:23:5b:12:a0:59:40:96:
e4:c0:f7:0b:af:b3:45:12:45:96:05:aa:d5:56:ed:
ba:10:64:ae:48:f7:4c:0d:7f:db:18:6f:75:50:5b:
8d:00:bf:ae:05:11:95:33:6c:77:e5:77:e2:27:47:
18:f3:46:91:a5:12:6a:60:c8:7e:c2:47:ad:48:be:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:EC:60:9A:DE:85:21:F2:D7:77:90:68:C4:58:D5:36:DE:A7:92
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/ZLnsYJrehSHy13eQaMRY1Tbep5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4c:21:65:ee:42:03:d8:59:23:1e:8a:ad:a2:22:8b:32:fe:
97:ab:f3:95:6a:f0:57:76:18:73:de:2e:d0:b3:33:46:9b:ce:
55:e5:bc:a7:dd:22:95:04:09:ba:64:39:87:e9:e0:ef:50:af:
36:1d:a5:6b:4a:14:c0:c6:ec:01:3b:93:b0:75:1b:6b:c3:58:
ae:97:18:0a:5e:49:ce:43:88:50:47:c4:f0:db:f6:9b:cb:f2:
7f:16:38:55:83:88:3b:6a:6a:9c:ba:ee:57:e9:e8:8c:18:4f:
60:2a:b5:96:28:76:79:64:81:07:80:db:68:23:d3:10:bd:f4:
7d:bd:74:38:e4:6a:8c:f0:81:21:bb:c7:4c:c8:d1:78:c1:a2:
ec:29:11:ad:be:50:38:45:93:96:a3:39:b4:9e:55:7c:9f:0d:
98:6b:5e:db:e7:e6:75:f0:78:b9:77:7a:93:61:6a:39:42:9e:
48:26:de:17:c5:c8:62:b3:fe:0c:10:57:b3:15:e2:b0:95:43:
01:10:fc:4c:13:a5:76:63:de:3d:76:0f:3c:e0:a9:1c:17:b0:
3e:c7:e0:88:28:d4:98:dc:3d:68:3d:1d:23:53:04:45:66:8c:
23:f3:72:72:a3:3e:49:90:ed:b6:46:05:52:2f:b5:5a:ec:42:
9c:6c:0c:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+rgVWEMJKIP4mNsXuV2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjUwMTAxMDM0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGI5ZWM2MDlhZGU4NTIxZjJkNzc3OTA2OGM0NThkNTM2ZGVhNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWolGTqjlj3wfPZOh95ciJFGS7P
OI/15/bCdUcn+1HKe3kNC5iwaQTNRfkSQ4FUctmbwBqDL97L6I/2u5pqUO4xkR2N
vmU6vw2Sl94S722HxqH2QbwF6ezlfe//6ESD5h7BTHihIhrQaLWmVa7Wxg6YLuIO
xwXsX4Icwt9Eb9/W/+/TYa/Fgs5nFk7NoWxPzSnPlEk3PhgV7cYGKQaCFCt9z+mQ
YM6SCorW1sag8D90JbYwxUyLmQLNPCNbEqBZQJbkwPcLr7NFEkWWBarVVu26EGSu
SPdMDX/bGG91UFuNAL+uBRGVM2x35XfiJ0cY80aRpRJqYMh+wketSL7mJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGS57GCa3oUh8td3kGjEWNU23qeSMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvWkxuc1lKcmVoU0h5MTNlUWFNUlkxVGJlcDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgnfMA0G
CSqGSIb3DQEBCwUAA4IBAQBFTCFl7kID2FkjHoqtoiKLMv6Xq/OVavBXdhhz3i7Q
szNGm85V5byn3SKVBAm6ZDmH6eDvUK82HaVrShTAxuwBO5OwdRtrw1iulxgKXknO
Q4hQR8Tw2/aby/J/FjhVg4g7amqcuu5X6eiMGE9gKrWWKHZ5ZIEHgNtoI9MQvfR9
vXQ45GqM8IEhu8dMyNF4waLsKRGtvlA4RZOWozm0nlV8nw2Ya17b5+Z18Hi5d3qT
YWo5Qp5IJt4Xxchis/4MEFezFeKwlUMBEPxME6V2Y949dg884KkcF7A+x+CIKNSY
3D1oPR0jUwRFZowj83Jyoz5JkO22RgVSL7Va7EKcbAxI
-----END CERTIFICATE-----
Generated at Thu Apr 24 02:05:16 2025 by rpki-client